Tests and a clear license reduce adoption friction. The single-maintainer project has had no commits or releases for about 19 months, while its CI actions are unpinned.
64%
Total Score
63
100
83
75
One registry account has publish access. This is a limited publishing base, but the repository is owned by the same individual, so the evidence is consistent rather than indicating a disconnected publisher.
The latest release was about 19 months before collection, with no releases in the prior 12 months. This indicates stalled delivery for a library that may need ongoing compatibility maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the roughly 19-month release gap and indicating no recent maintenance capacity.
There are no open issues or pull requests and no issue or pull-request activity in the past month. This is not inherently unhealthy for a small stable library, so it is only a minor caution alongside the inactive commit history.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low numbers provide little external adoption signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.